Search Results (24 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-9879 1 Melapress 1 Melapress File Monitor 2025-06-12 5.4 Medium
The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
CVE-2024-10009 1 Melapress 1 Melapress File Monitor 2025-06-11 4.1 Medium
The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
CVE-2025-0767 1 Melapress 1 Wp Activity Log 2025-05-21 9.8 Critical
WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.
CVE-2022-44587 1 Melapress 1 Wp 2fa 2024-11-21 5.3 Medium
Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.